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METHODS FOR SECURE ENROLLMENT AND BACKUP OF PERSONAL 
IDENTITY CREDENTIALS INTO ELECTRONIC DEVICES 

RELATED U.S. APPLICATION DATA 

[01] This application claims priority under 35 USC 1 19(e) of provisional patent application 
Serial No. 60/401,399 filed on Aug. 6, 2002 entitled, "A Secure Enrollment Process for a 
Biometrically Authenticated, Portable Electronic Device," which is hereby incorporated by 
reference in its entirety. 

BACKGROUND OF THE INVENTION 
Field of the Invention: 

[02] This invention relates generally to the field of information security, and more particularly 
to an enrollment process for devices capable of storing and releasing personal identity credentials 
based on authentication of a human fingerprint. 

Necessity of the Invention: 

[03] Devices and applications that use biometric authentication are increasing in popularity 
and frequency of use in applications where information security and privacy is critical. The 
success rates of devices that use biometrics as a form of authorization are dependent on the 
accuracy of the process by which information is associated with the biometric; for example, it 
must not be possible for John Doe to intercept Jane Doe's enrollment process and enroll Jane 
Doe's credentials into a device with his fingerprint. A generalized enrollment process includes 
capturing a biometric sample, ensuring the legitimacy of the sample and the individual providing 
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the sample, storing the biometric sample in the appropriate location in the device, and enabling 
access rights to the enrolled individual. If this enrollment process is performed incorrectly or 
ineffectively then the process of biometric authentication and the implicit guarantee of enhanced 
security are easily defeated. 

[04] A variety of portable electronic devices with biometric authentication are available to 
consumers. These include Hewlett Packard's iPAQ Pocket PC h5450, 3M-AiT's VeriMe, 
Privaris' BPID™ Security Device, and Sony's FIU-900 Puppy®. Each device is capable of 
storing fingerprints and performing on-board matching. Several of these products are 
configurable to allow use of cryptographic keys after proof of biometric identification. As 
discussed in the following section, ownership of cryptographic keys is typically used as a form of 
remote identification when individuals are communicating digitally. It is imperative, then, that 
the fingerprint is definitively linked to an individual, so that the cryptographic keys cannot be 
misused. 

[05] Furthermore, because the enrollment process must necessarily be stringent, and likely 
time-consuming, it is desirable to have a simple method of archiving and restoring enrolled 
credentials and fingerprints. Clearly the method must be inherently secure, because the entire 
enrollment process could be overridden by a compromise of the backup process. 

DESCRIPTION OF THE RELATED ART: 
Public Key Infrastructure 
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[06] The public key infrastructure (PKI) and digital certificates are very common and, when 
used correctly, can be used to guarantee a 'cryptographic identity' of an individual. The most 
common form of the PKI uses the RSA algorithm, which is now freely available to the public. 

[07] To use the PKI, an individual - Alice - applies for a digital certificate from a trusted 
authority. After a substantive background investigatory process, the trusted authority decides 
that Alice is who she claims to be and decides to issue a digital certificate. The certificate 
includes a public key, one half of an asymmetric key pair, which is assigned only to Alice. She 
retains the other half of the key pair, the private key. Due to the fundamental principles of public 
key cryptography, anything encrypted by the Alice's private key can only be decrypted using her 
public key, and vice versa. Alice is free to distribute the digital certificate and the public key to 
whomever she wishes. 

[08] When another individual, Bob, wishes to send a message to Alice, he encrypts it with her 
public key. Alice receives the encrypted message and uses her private key to decrypt it. 
Because Alice is the unique owner of her public key, Bob knows that she possesses the unique 
and accompanying private key. Additionally, Bob sees that a trusted authority, which he knows 
performs substantive background checks, issued the digital certificate issued to Alice. He is 
assured that the only person who can read the message is truly Alice. This assures one-way 
security. 

[09] However, Alice cannot be sure that Bob sent her the message, because her public key is 
freely accessible. To combat this problem, Bob also requests and receives a digital certificate 
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from a trusted authority. Bob writes his message and then creates a digital signature for the 
message. He first creates a hash of the message; this process creates a fixed-length string that is 
unique to the message but cannot be used to deduce the message. He then encrypts this hash 
using his private key and appends the encrypted hash to his message. The message and 
encrypted hash are now encrypted with Alice's public key, and transmitted to her. 

[10] Alice first decrypts the message with her private key. She can now read the message, as 
described above. However, she also has the encrypted hash, which she can use to verify that Bob 
sent the message. She uses Bob's public key to decrypt the digital signature and obtain the hash. 
Alice then hashes the received message herself, using the same hash algorithm as Bob. If she 
obtains the same hash value as the one transmitted by Bob, she is assured that the message has 
not changed, and that he did actually send the message. 

Enrollment Processes 

[11] 3M-AiT's VeriMe stores a biometric template and a cryptographic private key for one 
user. When the user wishes to use the cryptographic private key, he or she must supply the 
correct biometric template. According to the VeriMe fact sheet, the private key is generated at 
the time of "secure registration" of the fingerprint. However, the fact sheet does not describe the 
secure registration or what it entails; it also does not discuss a secure backup and recovery 
process. 

[12] Biometric Associates (BAI) produces a fingerprint sensor that can be embedded into a 
smartcard. The smartcard can then be used to perform local biometric authentication, like the 
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devices described above. According to BAI's website, the cards can enroll up to eight users with 
the use of a BAI Enrollment Station. The Enrollment Station provides external equipment 
necessary to instruct the smartcard to start enrolling fingerprints and personal credentials. 
However, the published information does not describe a secure cryptographic process for 
accomplishing this. It also does not describe secure backup and recovery processes. 

BRIEF SUMMARY OF THE INVENTION 

[13] The invention disclosed herein describes processes for securely enrolling personal 
identity credentials into devices with means for personal identification. For example, a handheld 
computer with a biometric sensor may use enrolled fingerprints to identify a user when he 
requests access to stored information. The enrollment of the fingerprint must tie the user 
definitively to the fingerprint so that future authorizations are valid. 

[14] The invention described herein provides a process for enrollment wherein a manufacturer 
of a personal identification device records serial numbers or another unique identifier for each 
device that it produces, along with a self-generated public key for each device. An enrollment 
authority is recognized by the manufacturer or another suitable institution as capable of 
validating an individual before enrolling him into the device-maintains and operates the 
appropriate equipment for enrollment, and provides its approval of the enrollment. 

[15] The methods described herein are directed to post-manufacturing processes for the 
device, as well as the enrollment itself. Additionally, the invention describes methods for 
securely archiving enrolled personal identity credentials. This is to allow users to restore 
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previously validated credentials into a new device without requiring a completely new 
enrollment. Correspondingly, the invention describes the restoration process, in which the stored 
credentials are securely downloaded into the new device. 



BRIEF DESCRIPTION OF DRAWINGS 
Figure 1 : Post-manufacturing process 

1 0 1 Provide manufacturer' s public key to device 

1 02 Generate key pair for device 

103 Provide device' public key and unique ID to manufacturer 

104 Create digital certificate for device 

105 Provide digital certificate to device 

106 Store device' public key and unique ID 

107 Disable device 

Figure 2: Enrollment 

201 Request permission from enrollment authority to enroll credentials into device 

202 Validate the request 

203 Present device' digital certificate 

204 Verify that device is true owner of the certificate 

205 Present enrollment authority's digital certificate 

206 Verify that enrollment authority is true owner of the certificate 

207 Create a session key 

208 Complete enrollment, encrypting with the session key 
Figure 3: Backup 

301 Create symmetric biometric encryption and decryption key 

302 Encrypt the biometric with the symmetric biometric encryption and decryption key 

303 Divide the symmetric biometric encryption and decryption key into two parts 

304 Encrypt first part with a passphrase 

305 Digitally sign second part with primary device' private key 

306 Encrypt digital signature and second part of symmetric biometric encryption and 
decryption key with the controller's public key 

307 Create symmetric personal identity credential encryption and decryption key 

308 Digitally sign personal identity credential with primary device' private key 

309 Encrypt credential with symmetric personal identity credential encryption and 
decryption key 

3 10 Divide symmetric personal identity credential encryption and decryption key 

3 1 1 Encrypt first part of symmetric personal identity credential encryption and 
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decryption key with passphrase 

312 Digitally sign second part of symmetric personal identity credential encryption and 
decryption key with primary device' private key 

313 Encrypt digital signature and second part of symmetric personal identity credential 
encryption and decryption key with controller's public key 

314 Store the encrypted biometric, encrypted credentials, and encrypted symmetric 
biometric encryption and decryption key and symmetric personal identity 
credential encryption and decryption key in an electronic storage repository 

315 Provide user with a digital certificate containing the primary device' public key 

Figure 4: Restoration 

301 Access the electronic storage repository 

302 Obtain both parts of the symmetric biometric encryption and decryption key 

303 Decrypt the first part with a passphrase 

304 Decrypt the second part and the digital signature with the controller's private key 

305 Verify the digital signature using the primary device' public key 

306 Combine both parts of the symmetric biometric encryption and decryption key 

307 Decrypt the biometric 

308 Store the biometric in the secondary device 

309 Obtain both parts of the symmetric personal identity credential encryption and 
decryption key 

3 1 0 Decrypt the first part with a passphrase 

31 1 Decrypt the second part and the digital signature with the controller's private key 

3 1 2 Verify the digital signature using the primary device' public key 

3 1 3 Combine both parts of the symmetric personal identity credential encryption and 
decryption key 

314 Decrypt the persona] identity credential and the associated digital signature 

315 Verify the digital signature using the primary device' public key 

316 Store the personal identity credential in the secondary device 

FIG. 1 is a flow chart illustrating the post-manufacturing process for a personal 
identification device. 

FIG. 2 is a flow chart illustrating the process for enrolling personal identity credentials 
into the personal identification device. 

FIG. 3 is a flow chart illustrating the backup process for securely storing personal identity 
credentials for future restoration. 

FIG. 4 is a flow chart illustrating the restoration process. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
[16] The following detailed description is of the best presently contemplated modes of 
carrying out the invention. This description is not to be taken in a limiting sense, but is made 
merely for the purpose of illustrating general principles of embodiments of the invention. 

[17] The invention disclosed herein provides a process for securely enrolling individuals into 
devices with means for personal identification via use of biometric authentication (hereafter 
referred to as 'personal identification devices'). Because these devices are intended for use as 
trusted authentication devices, it is imperative that all of the information stored within the device 
be placed there in such a manner that it cannot be altered without proper authorization. There are 
two participants in the enrollment process, the manufacturer of the personal identification device 
and an enrollment authority. 

[18] The enrollment process includes identifying the device post-manufacturing and enrolling 
personal identity credentials and an associated biometric into the personal identification device. 
Furthermore, the invention also discloses methods for creating secure backup and recovery 
processes, such that an individual may securely store the enrolled information in an electronic 
storage repository, such as a hard drive. If his personal identification device fails he can use the 
recovery process to transfer the stored, enrolled information to a new device. 

[19] The two participants in the enrollment process must be definitely and separately 
identified for proper enrollment. The first participant in the enrollment system is the 
manufacturer of the personal identification device. The manufacturer is responsible for 
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maintaining a database of unique identifiers, such as serial numbers, for all of the devices that it 
produces. This enables it later to determine if it manufactured a particular device. The second 
party is an enrollment authority, which is responsible for investigating, authorizing and 
performing individuals' requests for enrollment into a personal identification device. This 
participant may be a Department of Motor Vehicles, a building security officer, or any other 
person or organization responsible for issuing personal identification devices. 

Initial Enrollment 

[20] This enrollment system uses the PKI described above. Each manufacturer and 
enrollment authority is provided with at least one asymmetric key pair that can be used for 
identification and encryption. The key pairs may be self generated, but the public key for each 
must be placed in a digital certificate signed by a trusted authority. Additionally, the 
manufacturer may wish to sign digital certificates owned by the enrollment authority as means 
for guaranteeing its approval of the enrollment authority. 

[21] Figure 1 demonstrates the post-manufacturing process that begins the enrollment process 
for a personal identification device. Immediately following manufacturing, each personal 
identification device receives a public key possessed by its manufacturer (step 101). In the 
preferred embodiment this key is received as part of a digital certificate. The personal 
identification device can use this public key to verify the digital signature on messages 
transmitted from the manufacturer and accept them as legitimate instructions. This step requires 
that the manufacturing process be secure and tamper-resistant; receiving a key other than a 
trusted manufacturer's would directly compromise future security verifications. 
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[22] The personal identification device now generates an asymmetric key pair for itself (step 
102). The public key and the device's unique identifier are sent to the manufacturer (step 103). 
The manufacturer, or other legitimate certificate authority, generates a digital certificate for the 
device (step 104). This is now sent back to the device, and can be signed by the manufacturer as 
a token of its legitimacy (step 105). The manufacturer keeps a record of the device's public key 
and its unique identifier for future reference (step 106). At this point all functionality within the 
personal identification device is disabled, such that it is in a state waiting for future enrollment 
(step 107). 

[23] As seen in Figure 2, upon receipt of a personal identification device, an individual 
requests enrollment rights from an enrollment authority (step 201). This may require that the 
individual be physically present in a specified location, or may be performed remotely. The 
enrollment authority may establish all rules pertaining to the applicant verification process. The 
security and authenticity of the personal identification device is only as good as that of the 
verification process, so it is anticipated that these processes will be as stringent as required by the 
end application. 

[24] After approving the applicant, the enrollment authority receives the personal 
identification device's digital certificate (steps 202 and 203). The enrollment authority validates 
the digital certificate by prompting the device to encrypt a predetermined string with its private 
key (step 204). The enrollment authority now decrypts the encrypted string using the public key 
stored in the device' digital certificate, and verifies that the decrypted string matches the 
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predetermined string. At this point the personal identification device will receive and verify the 
validity of the enrollment authority's digital certificate (steps 206 and 206). It performs the same 
prompt and verification process described above, and can also verify the manufacturer's 
signature on the certificate if one exists. After confirming the legitimacy of the enrollment 
authority, the personal identification device creates a session key and securely releases it to the 
enrollment authority (step 207). The personal identification device and the enrollment authority 
can now communicate freely using the session key (step 208). The biometric may be 
downloaded into the personal identification device along with the personal identity credentials, 
or may alternatively be sensed locally using the device and stored locally. The enrollment 
process, at this stage, is application-dependent and requires the establishment of requisite 
credentials, etc., which are not covered within the scope of this invention. 

Restoration Processes 

[25] It may be necessary in some cases to provide a backup of at least one enrolled personal 

identity credential and biometric. The backup may be used in the event that the personal , 

identification device fails, such that the individual may re-enroll a new personal identification 

device without undergoing the entire process described above; these devicees are referred to as 

the 'primary personal identification device' and the 'secondary personal identification device,' 

respectively. 

Backup 

[26] There are two distinct parts of the restoration process. The first part describes a method 
for archiving the enrolled personal identity credential, which allows an enrolled individual to 
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securely store his personal identity credential and biometric to a user-accessible computer disk or 
other electronic storage repository. This data is only accessible with permission from a device 
manufacturer, an enrollment authority, or a recovery authority, as specified by the implementer 
of the system. In the primary embodiment, this system controller will be the manufacturer of the 
primary personal identification device. The second part of the restoration process describes a 
method for restoring the stored data to the secondary personal identification device. 

[27] As seen in Figure 3, the primary personal identification device generates a symmetric 
biometric encryption and decryption key (step 301). This key is used for encrypting a digital 
representation of the enrolled biometric (step 302), which can be used to unlock the archived 
personal identity credential (s). After encryption of the biometric, the symmetric biometric 
encryption and decryption key is divided into two unique and distinct parts (step 303); the 
scheme of separation may be selected at the discretion of the system implementer. The first part 
of the symmetric biometric encryption and decryption key is encrypted with a user-selected 
passphrase (step 304). The second part of the symmetric biometric encryption and decryption 
key is signed by a private key possessed by the primary personal identification device (step 
305), and is then encrypted with a public key owned by the system controller (step 306). As 
described above, in this embodiment the system controller is the primary personal identification 
device manufacturer. Using the manufacturer's public key forces an individual to request 
restoration privileges from the manufacturer during restoration, because the individual needs the 
manufacturer to decrypt the data with its private key. This is discussed in further detail below. 
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[28] The primary personal identification device then generates a symmetric personal identity 
credential encryption and decryption key (step 307), which is used for encrypting at least one 
enrolled personal identity credential. The primary personal identification device first digitally 
signs the personal identity credential, using a private key (step 308), and then encrypts the 
personal identity credential and associated digital signature (step 309). Similarly to the scheme 
described above, the symmetric personal identity credential encryption and decryption key is 
divided (step 310) into two unique and distinct parts. The first part is encrypted with a user- 
selected passphrase (step 311), which may or may not be the same passphrase as used above. 
The second part is again signed by the device' private key (step 312) and encrypted with the 
manufacturer's public key (step 313). 

[29] All of the encrypted and/or signed data - the biometric, the symmetric biometric 
encryption and decryption key, the personal identity credential, and the symmetric personal 
identity credential encryption and decryption key - are now stored in an electronic storage 
repository (step 314). In typical embodiments the electronic storage repository could be a 
computer hard drive, floppy disk, or network drive. The primary personal identification device 
releases its digital certificate to the individual for future use of its public key (step 315). 

Restoration 

[30] As seen in Figure 4, when an individual receives a secondary personal identification 
device, and wishes to restore data from a primary personal identification device, he must access 
the electronic storage repository (step 401). The individual must first acquire the two encrypted 
and/or signed parts of the symmetric biometric encryption and decryption key (step 402). The 
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secondary personal identification device decrypts the first part of the symmetric biometric 
encryption and decryption key with the user's passphrase (step 403). It then requests the system 
controller, the manufacturer of the primary personal identification device, to decrypt the second 
part of the symmetric biometric encryption and decryption key and the associated digital 
signature using its (the manufacturer's) private key (step 404). Once the data has been 
decrypted, the secondary personal identification device verifies the digital signature using a 
public key possessed by the primary personal identification device (step 405). The two parts of 
the symmetric biometric encryption and decryption key are now combined appropriately (step 
406), and can be used to decrypt the biometric (step 407). The biometric is now stored in an 
appropriate location within the secondary personal identification device (step 408). 

[31] The individual now obtains the two encrypted and/or signed parts of the symmetric 
personal identity credential encryption and decryption key (step 409). Similarly to the process 
described above, the secondary personal identification device decrypts the first part of the 
symmetric personal identity credential encryption and decryption key using a user-selected 
passphrase (step 410). It now requests the system controller, the manufacturer of the primary 
personal identification device, to decrypt the second part of the symmetric personal identity 
credential encryption and decryption key and the accompanying digital signature using its private 
key (step 411). Again, the secondary personal identification device verifies the digital signature 
using a public key possessed by the primary personal identification device (step 412). The two 
parts of the key are reconstructed to form one key (step 413). The key is now used to decrypt the 
personal identity credential and the associated digital signature (step 414), and the signature is 
verified using a public key owned by the primary personal identification device (step 415). The 
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decrypted personal identity credential can now be stored appropriately within the secondary 
personal identification device (step 416). 



[32] While the description above refers to particular embodiments of the present invention, it 
will be understood that many modifications may be made without departing from the spirit 
thereof. The accompanying claims are intended to cover such modifications as would fall within 
the true scope and spirit of the present invention. 
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